Search This Blog

Powered by Blogger.

Blog Archive

Labels

Showing posts with label Turkey. Show all posts

Google's Earthquake Alert System Failed to Notify Residents of Turkish Earthquake

 

An investigation by BBC Newsnight on July 27, 2023, revealed that Google's earthquake warning system failed to reach many residents in southern Turkey before the devastating double earthquake disaster that occurred in February, claiming tens of thousands of lives.

Google claims that its Android Earthquake Alert System is capable of providing users with up to one minute's notice before an earthquake strikes, utilizing a loud alarm to alert them. The company stated that it had sent tremor alerts to millions of users prior to the first and largest quake that hit in the early hours. 

However, when the BBC conducted interviews with hundreds of people in three cities within the earthquake zone, they were unable to find anyone who had received a warning.

Harold Tobin, the director of the Pacific Northwest Seismic Network, expressed concern, saying that if Google promises or implies the delivery of an earthquake early warning service, the stakes are raised as it directly relates to people's lives and safety. He believes that Google has a responsibility to follow through on such a critical service.

Micah Berman, the product lead on Google's system, defended the earthquake warning system, stating that they are confident it worked and alerts were sent out. However, the BBC reported that the company did not provide evidence that these alerts were widely received.

Although about 80% of mobile phones in Turkey operate on the Android system, the BBC found only a small number of individuals who claimed to have received a Google earthquake alert before the second quake struck during lunchtime.

Google's earthquake alert service is considered a "core" component of its Android service, utilizing the vast network of Android phones to send quake alerts. This is made possible by the accelerometers in smartphones that can detect shaking.

During their investigation, the BBC team visited cities like Adana, Iskenderun, and Osmaniye, located between 70 and 150 kilometers away from the earthquake epicenter. The people they interviewed were adamant that they did not receive any Google warnings on their phones prior to the first earthquake. One woman named Funda, who tragically lost 25 members of her family in the disaster, stated that she was "certain" she did not receive any alert from Google.

Tobin emphasized the importance of Google being transparent about its earthquake alert service, suggesting that if the system had worked during this major earthquake, it could have been highly beneficial. However, the failure of the system during such a significant earthquake raises questions about its effectiveness and why it did not provide the expected benefits during one of the biggest earthquakes in the last century.



15,000 Clients Data Leaked Accidently by a Turkish Firm

 

Accidentally, a law firm has disclosed client data of 15,000 incidents in which individuals have been killed and wounded after a cloud misconfiguration. Through a misconfigured Amazon S3 bucket, the WizCase team unearthed a huge data leak with private details regarding Turkish residents. The server includes 55,000 judicial records concerning more than 15,000 court proceedings, affecting hundreds of thousands of individuals. The firm affirmed that it does not require any permission to browse the 20GB trove that anyone with the URL may have viewed the very confidential information.

WizCase is one of the leading multinational websites offering cybersecurity resources, tricks, and best practices for online safety. Also incorporates VPN ratings and tutorials. The data was traced by WizCase, back to the Turkish actuarial consulting company, Inova Yönetim, which analyses details for risk and premium estimation.

The online security team has revealed a major abuse of the data from an Amazon Bucket misconfigured by INOVA YÖNETIM & AKTÜERYAL DANIŞMANLIK, a Turkish legal attorney. Inova is an actuarial consulting firm that gathers mathematical data and measures the probability and premiums of insurers. Since 2012, Inova has been in operation and has dealt with thousands of cases. 

The researchers have found that, along with insurance and accident data, the personally identifiable information (PII) about the survivor in each of the 15,000 court cases including name, national ID and marital status, and day of birth is also available. Some records have revealed much more specific details about claimants, witnesses, and others, including detailed accident information, car registration numbers, breathalyzer test reports, incident descriptions, and many more. In certain cases, the data has more details about the victims or other persons involved in it. It involved information of parties such as victims, event participants, police officers, lawyers. 

The data appeared to relate to the circumstances between the beginning of 2018 and the end of summer 2020. Many who are vulnerable to the snafu could be at risk from scammers following extremely persuasive phishing emails or telephone calls to get more financial and personal details. 

“With some social engineering, bad actors or criminals could contact an [mobile] operator, masquerading as the victim, and verify all kinds of verification questions operators would ask to clone a SIM card,” WizCase stated. “After having access to victims’ phone calls and SMS messages, bad actors could then try to do the same operation with clients’ insurance and bank.” 

According to WizCase, for situations like this, preserving the internal data is unusually challenging since it is always in the hands of the organization one deals for. One must be sure that they just send the correct details and ask them what security steps they are undertaking to keep their private data private. If one gets a call relating to the crash, please notify their Inova contact and ensure that an application comes from them, and never trust someone asking for personal details over a phone.